When Ransom Agreements Become Business as Usual
Instructure's agreement with ShinyHunters raises hard questions about when organisations pay attackers—and the security implications for hosted education infrastructure.
Read article →
RCS Encryption: Why End-to-End Messaging Matters for Privacy Infrastructure
Apple's move to default end-to-end encryption in RCS marks a shift in how mainstream messaging handles privacy. We examine the technical and infrastructure implications.
Read article →
cPanel CVE-2026-41940: Active Exploitation and Backdoor Deployment
A critical cPanel flaw allowing authentication bypass is being actively exploited to install persistent backdoors. Learn the attack chain and immediate mitigation steps.
Read article →
Supply Chain Risk in Jenkins Plugins: A Hosting and DevOps Concern
A compromised Jenkins plugin highlights how third-party tools in your CI/CD pipeline pose infrastructure security risks. What operators need to watch for.
Read article →
AI-Assisted Zero-Day Exploits: What Infrastructure Teams Need to Know
When threat actors use AI to accelerate vulnerability discovery, the attack surface expands. We examine what this means for hosting and infrastructure defence.
Read article →
Supply Chain Threats in ML Model Repositories
Malicious actors are exploiting the trust placed in machine-learning model repositories by impersonating legitimate projects. Learn how to spot compromised packages.
Read article →
